@better-openclaw/core 1.0.14 → 1.0.15

package/dist/services/definitions/signoz.mjs

@@ -0,0 +1,54 @@
+//#region src/services/definitions/signoz.ts
+const signozDefinition = {
+	id: "signoz",
+	name: "SigNoz",
+	description: "Open-source observability platform serving as a lighter alternative to DataDog.",
+	category: "monitoring",
+	icon: "📈",
+	image: "signoz/signoz-frontend",
+	imageTag: "latest",
+	ports: [{
+		host: 3301,
+		container: 3301,
+		description: "SigNoz Web UI",
+		exposed: true
+	}],
+	volumes: [],
+	environment: [{
+		key: "FRONTEND_PUBLIC_TELEMETRY",
+		defaultValue: "false",
+		secret: false,
+		description: "Enable anonymized usage telemetry",
+		required: false
+	}],
+	healthcheck: {
+		test: "wget -q --spider http://localhost:3301 || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "15s"
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+	skills: [],
+	openclawEnvVars: [],
+	docsUrl: "https://signoz.io/docs/",
+	tags: [
+		"observability",
+		"metrics",
+		"traces",
+		"logs",
+		"opentelemetry"
+	],
+	maturity: "stable",
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+	minMemoryMB: 1024,
+	gpuRequired: false
+};
+
+//#endregion
+export { signozDefinition };
+//# sourceMappingURL=signoz.mjs.map

package/dist/services/definitions/signoz.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signoz.mjs","names":[],"sources":["../../../src/services/definitions/signoz.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const signozDefinition: ServiceDefinition = {\n\tid: \"signoz\",\n\tname: \"SigNoz\",\n\tdescription: \"Open-source observability platform serving as a lighter alternative to DataDog.\",\n\tcategory: \"monitoring\",\n\ticon: \"📈\",\n\n\timage: \"signoz/signoz-frontend\",\n\timageTag: \"latest\",\n\tports: [\n\t\t{\n\t\t\thost: 3301,\n\t\t\tcontainer: 3301,\n\t\t\tdescription: \"SigNoz Web UI\",\n\t\t\texposed: true,\n\t\t},\n\t],\n\tvolumes: [],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"FRONTEND_PUBLIC_TELEMETRY\",\n\t\t\tdefaultValue: \"false\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Enable anonymized usage telemetry\",\n\t\t\trequired: false,\n\t\t},\n\t],\n\thealthcheck: {\n\t\ttest: \"wget -q --spider http://localhost:3301 || exit 1\",\n\t\tinterval: \"30s\",\n\t\ttimeout: \"10s\",\n\t\tretries: 3,\n\t\tstartPeriod: \"15s\",\n\t},\n\tdependsOn: [],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://signoz.io/docs/\",\n\ttags: [\"observability\", \"metrics\", \"traces\", \"logs\", \"opentelemetry\"],\n\tmaturity: \"stable\",\n\n\trequires: [],\n\trecommends: [],\n\tconflictsWith: [],\n\n\tminMemoryMB: 1024,\n\tgpuRequired: false,\n};\n"],"mappings":";AAEA,MAAa,mBAAsC;CAClD,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,EAAE;CACX,aAAa,CACZ;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,CACD;CACD,aAAa;EACZ,MAAM;EACN,UAAU;EACV,SAAS;EACT,SAAS;EACT,aAAa;EACb;CACD,WAAW,EAAE;CACb,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAiB;EAAW;EAAU;EAAQ;EAAgB;CACrE,UAAU;CAEV,UAAU,EAAE;CACZ,YAAY,EAAE;CACd,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/supabase.d.mts

@@ -0,0 +1,7 @@
+import { ServiceDefinition } from "../../types.mjs";
+
+//#region src/services/definitions/supabase.d.ts
+declare const supabaseDefinition: ServiceDefinition;
+//#endregion
+export { supabaseDefinition };
+//# sourceMappingURL=supabase.d.mts.map

package/dist/services/definitions/supabase.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.d.mts","names":[],"sources":["../../../src/services/definitions/supabase.ts"],"mappings":";;;cAEa,kBAAA,EAAoB,iBAAA"}

package/dist/services/definitions/supabase.mjs

@@ -0,0 +1,69 @@
+//#region src/services/definitions/supabase.ts
+const supabaseDefinition = {
+	id: "supabase",
+	name: "Supabase",
+	description: "The open source Firebase alternative. Build production-grade backends instantly.",
+	category: "database",
+	icon: "⚡",
+	image: "supabase/studio",
+	imageTag: "latest",
+	ports: [{
+		host: 3e3,
+		container: 3e3,
+		description: "Supabase Studio Web Dashboard",
+		exposed: true
+	}, {
+		host: 8e3,
+		container: 8e3,
+		description: "Supabase API Gateway",
+		exposed: true
+	}],
+	volumes: [{
+		name: "supabase_db",
+		containerPath: "/var/lib/postgresql/data",
+		description: "Supabase Postgres database storage"
+	}],
+	environment: [{
+		key: "STUDIO_DEFAULT_ORGANIZATION",
+		defaultValue: "Default Organization",
+		secret: false,
+		description: "Default organization name",
+		required: false
+	}, {
+		key: "STUDIO_DEFAULT_PROJECT",
+		defaultValue: "Default Project",
+		secret: false,
+		description: "Default project name",
+		required: false
+	}],
+	healthcheck: {
+		test: "wget -q --spider http://localhost:3000/api/profile || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s"
+	},
+	dependsOn: ["postgresql"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+	skills: [],
+	openclawEnvVars: [],
+	docsUrl: "https://supabase.com/docs/guides/self-hosting",
+	tags: [
+		"database",
+		"auth",
+		"storage",
+		"realtime",
+		"edge-functions"
+	],
+	maturity: "stable",
+	requires: ["postgresql"],
+	recommends: [],
+	conflictsWith: [],
+	minMemoryMB: 2048,
+	gpuRequired: false
+};
+
+//#endregion
+export { supabaseDefinition };
+//# sourceMappingURL=supabase.mjs.map

package/dist/services/definitions/supabase.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.mjs","names":[],"sources":["../../../src/services/definitions/supabase.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const supabaseDefinition: ServiceDefinition = {\n\tid: \"supabase\",\n\tname: \"Supabase\",\n\tdescription: \"The open source Firebase alternative. Build production-grade backends instantly.\",\n\tcategory: \"database\",\n\ticon: \"⚡\",\n\n\timage: \"supabase/studio\",\n\timageTag: \"latest\",\n\tports: [\n\t\t{\n\t\t\thost: 3000,\n\t\t\tcontainer: 3000,\n\t\t\tdescription: \"Supabase Studio Web Dashboard\",\n\t\t\texposed: true,\n\t\t},\n\t\t{\n\t\t\thost: 8000,\n\t\t\tcontainer: 8000,\n\t\t\tdescription: \"Supabase API Gateway\",\n\t\t\texposed: true,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"supabase_db\",\n\t\t\tcontainerPath: \"/var/lib/postgresql/data\",\n\t\t\tdescription: \"Supabase Postgres database storage\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"STUDIO_DEFAULT_ORGANIZATION\",\n\t\t\tdefaultValue: \"Default Organization\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Default organization name\",\n\t\t\trequired: false,\n\t\t},\n\t\t{\n\t\t\tkey: \"STUDIO_DEFAULT_PROJECT\",\n\t\t\tdefaultValue: \"Default Project\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Default project name\",\n\t\t\trequired: false,\n\t\t},\n\t],\n\thealthcheck: {\n\t\ttest: \"wget -q --spider http://localhost:3000/api/profile || exit 1\",\n\t\tinterval: \"30s\",\n\t\ttimeout: \"10s\",\n\t\tretries: 3,\n\t\tstartPeriod: \"30s\",\n\t},\n\tdependsOn: [\"postgresql\"],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://supabase.com/docs/guides/self-hosting\",\n\ttags: [\"database\", \"auth\", \"storage\", \"realtime\", \"edge-functions\"],\n\tmaturity: \"stable\",\n\n\trequires: [\"postgresql\"],\n\trecommends: [],\n\tconflictsWith: [],\n\n\tminMemoryMB: 2048,\n\tgpuRequired: false,\n};\n"],"mappings":";AAEA,MAAa,qBAAwC;CACpD,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,EACD;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa,CACZ;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,EACD;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,CACD;CACD,aAAa;EACZ,MAAM;EACN,UAAU;EACV,SAAS;EACT,SAAS;EACT,aAAa;EACb;CACD,WAAW,CAAC,aAAa;CACzB,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAY;EAAQ;EAAW;EAAY;EAAiB;CACnE,UAAU;CAEV,UAAU,CAAC,aAAa;CACxB,YAAY,EAAE;CACd,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/vaultwarden.d.mts

@@ -0,0 +1,7 @@
+import { ServiceDefinition } from "../../types.mjs";
+
+//#region src/services/definitions/vaultwarden.d.ts
+declare const vaultwardenDefinition: ServiceDefinition;
+//#endregion
+export { vaultwardenDefinition };
+//# sourceMappingURL=vaultwarden.d.mts.map

package/dist/services/definitions/vaultwarden.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaultwarden.d.mts","names":[],"sources":["../../../src/services/definitions/vaultwarden.ts"],"mappings":";;;cAEa,qBAAA,EAAuB,iBAAA"}

package/dist/services/definitions/vaultwarden.mjs

@@ -0,0 +1,63 @@
+//#region src/services/definitions/vaultwarden.ts
+const vaultwardenDefinition = {
+	id: "vaultwarden",
+	name: "Vaultwarden",
+	description: "Unofficial Bitwarden compatible server written in Rust, perfect for self-hosted deployments.",
+	category: "security",
+	icon: "🔐",
+	image: "vaultwarden/server",
+	imageTag: "latest",
+	ports: [{
+		host: 80,
+		container: 80,
+		description: "Vaultwarden Web Interface / API",
+		exposed: true
+	}],
+	volumes: [{
+		name: "vaultwarden_data",
+		containerPath: "/data",
+		description: "Persistent Vaultwarden data storage"
+	}],
+	environment: [{
+		key: "WEBSOCKET_ENABLED",
+		defaultValue: "true",
+		secret: false,
+		description: "Enable WebSocket notifications",
+		required: false
+	}, {
+		key: "SIGNUPS_ALLOWED",
+		defaultValue: "true",
+		secret: false,
+		description: "Allow new user signups",
+		required: false
+	}],
+	healthcheck: {
+		test: "curl --fail http://localhost:80/alive || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "15s"
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+	skills: [],
+	openclawEnvVars: [],
+	docsUrl: "https://github.com/dani-garcia/vaultwarden/wiki",
+	tags: [
+		"security",
+		"passwords",
+		"bitwarden",
+		"secrets"
+	],
+	maturity: "stable",
+	requires: [],
+	recommends: ["caddy", "traefik"],
+	conflictsWith: [],
+	minMemoryMB: 128,
+	gpuRequired: false
+};
+
+//#endregion
+export { vaultwardenDefinition };
+//# sourceMappingURL=vaultwarden.mjs.map

package/dist/services/definitions/vaultwarden.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaultwarden.mjs","names":[],"sources":["../../../src/services/definitions/vaultwarden.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const vaultwardenDefinition: ServiceDefinition = {\n\tid: \"vaultwarden\",\n\tname: \"Vaultwarden\",\n\tdescription:\n\t\t\"Unofficial Bitwarden compatible server written in Rust, perfect for self-hosted deployments.\",\n\tcategory: \"security\",\n\ticon: \"🔐\",\n\n\timage: \"vaultwarden/server\",\n\timageTag: \"latest\",\n\tports: [\n\t\t{\n\t\t\thost: 80, // User should probably proxy this or change it to avoid conflicts\n\t\t\tcontainer: 80,\n\t\t\tdescription: \"Vaultwarden Web Interface / API\",\n\t\t\texposed: true,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"vaultwarden_data\",\n\t\t\tcontainerPath: \"/data\",\n\t\t\tdescription: \"Persistent Vaultwarden data storage\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"WEBSOCKET_ENABLED\",\n\t\t\tdefaultValue: \"true\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Enable WebSocket notifications\",\n\t\t\trequired: false,\n\t\t},\n\t\t{\n\t\t\tkey: \"SIGNUPS_ALLOWED\",\n\t\t\tdefaultValue: \"true\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Allow new user signups\",\n\t\t\trequired: false,\n\t\t},\n\t],\n\thealthcheck: {\n\t\ttest: \"curl --fail http://localhost:80/alive || exit 1\",\n\t\tinterval: \"30s\",\n\t\ttimeout: \"10s\",\n\t\tretries: 3,\n\t\tstartPeriod: \"15s\",\n\t},\n\tdependsOn: [],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://github.com/dani-garcia/vaultwarden/wiki\",\n\ttags: [\"security\", \"passwords\", \"bitwarden\", \"secrets\"],\n\tmaturity: \"stable\",\n\n\trequires: [],\n\trecommends: [\"caddy\", \"traefik\"],\n\tconflictsWith: [],\n\n\tminMemoryMB: 128,\n\tgpuRequired: false,\n};\n"],"mappings":";AAEA,MAAa,wBAA2C;CACvD,IAAI;CACJ,MAAM;CACN,aACC;CACD,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa,CACZ;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,EACD;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,CACD;CACD,aAAa;EACZ,MAAM;EACN,UAAU;EACV,SAAS;EACT,SAAS;EACT,aAAa;EACb;CACD,WAAW,EAAE;CACb,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAY;EAAa;EAAa;EAAU;CACvD,UAAU;CAEV,UAAU,EAAE;CACZ,YAAY,CAAC,SAAS,UAAU;CAChC,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-openclaw/core",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "private": false,
   "description": "Core logic for better-openclaw: schemas, service registry, resolver, composer, validators and more",
   "packageManager": "pnpm@9.15.4",

package/src/resolver.ts

@@ -241,16 +241,16 @@ export function resolve(input: ResolverInput): ResolverOutput {
 	const isValid = errors.length === 0;
 
 	return {
-	services,
-	addedDependencies,
-	removedConflicts: [],
-	warnings,
-	errors,
-	isValid,
-	estimatedMemoryMB,
-	aiProviders: input.aiProviders ?? [],
-	gsdRuntimes: []
-};
+		services,
+		addedDependencies,
+		removedConflicts: [],
+		warnings,
+		errors,
+		isValid,
+		estimatedMemoryMB,
+		aiProviders: input.aiProviders ?? [],
+		gsdRuntimes: [],
+	};
 }
 
 /**

package/src/services/definitions/authentik.ts

@@ -0,0 +1,106 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const authentikDefinition: ServiceDefinition = {
+	id: "authentik",
+	name: "Authentik",
+	description: "The open-source Identity Provider that unifies your identity infrastructure.",
+	category: "security",
+	icon: "🛡️",
+
+	image: "ghcr.io/goauthentik/server",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 9000,
+			container: 9000,
+			description: "Authentik HTTP Interface",
+			exposed: true,
+		},
+		{
+			host: 9443,
+			container: 9443,
+			description: "Authentik HTTPS Interface",
+			exposed: false,
+		},
+	],
+	volumes: [
+		{
+			name: "authentik_media",
+			containerPath: "/media",
+			description: "Authentik media storage",
+		},
+		{
+			name: "authentik_custom_templates",
+			containerPath: "/templates",
+			description: "Authentik custom templates",
+		},
+	],
+	environment: [
+		{
+			key: "AUTHENTIK_REDIS__HOST",
+			defaultValue: "redis",
+			secret: false,
+			description: "Redis server hostname",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_POSTGRESQL__HOST",
+			defaultValue: "postgres",
+			secret: false,
+			description: "Postgres database hostname",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_POSTGRESQL__USER",
+			defaultValue: "postgres",
+			secret: false,
+			description: "Postgres database user",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_POSTGRESQL__NAME",
+			defaultValue: "authentik",
+			secret: false,
+			description: "Postgres database name",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_POSTGRESQL__PASSWORD",
+			defaultValue: "postgres",
+			secret: true,
+			description: "Postgres database password",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_SECRET_KEY",
+			defaultValue: "authentik_secret_replace_me_in_production",
+			secret: true,
+			description: "Secret key used for cookie signing",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl --fail http://localhost:9000/-/health/live/ || exit 1",
+		interval: "30s",
+		timeout: "5s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: ["postgresql", "redis"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://docs.goauthentik.io/",
+	tags: ["identity", "sso", "saml", "oidc", "oauth2", "security"],
+	maturity: "stable",
+
+	requires: ["postgresql", "redis"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 2048,
+	gpuRequired: false,
+};

package/src/services/definitions/crowdsec.ts

@@ -0,0 +1,66 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const crowdsecDefinition: ServiceDefinition = {
+	id: "crowdsec",
+	name: "CrowdSec",
+	description:
+		"Free, open-source and collaborative IPS designed to protect servers, services, and containers.",
+	category: "security",
+	icon: "⚔️",
+
+	image: "crowdsecurity/crowdsec",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 8080,
+			container: 8080,
+			description: "CrowdSec Local API Interface",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "crowdsec_data",
+			containerPath: "/v/lib/crowdsec/data",
+			description: "CrowdSec persistent SQLite data",
+		},
+		{
+			name: "crowdsec_config",
+			containerPath: "/etc/crowdsec",
+			description: "CrowdSec configurations",
+		},
+	],
+	environment: [
+		{
+			key: "COLLECTIONS",
+			defaultValue: "crowdsecurity/linux crowdsecurity/sshd",
+			secret: false,
+			description: "Default collections to install",
+			required: false,
+		},
+	],
+	healthcheck: {
+		test: "cscli metrics || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "15s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://docs.crowdsec.net/",
+	tags: ["ips", "ids", "firewall", "security", "threat-intelligence"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 256,
+	gpuRequired: false,
+};

package/src/services/definitions/ghost.ts

@@ -0,0 +1,60 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const ghostDefinition: ServiceDefinition = {
+	id: "ghost",
+	name: "Ghost",
+	description: "The world's most popular modern open-source publishing platform.",
+	category: "social-media",
+	icon: "👻",
+
+	image: "ghost",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 2368,
+			container: 2368,
+			description: "Ghost Public Interface",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "ghost_content",
+			containerPath: "/var/lib/ghost/content",
+			description: "Ghost images, themes, and content storage",
+		},
+	],
+	environment: [
+		{
+			key: "url",
+			defaultValue: "http://localhost:2368",
+			secret: false,
+			description: "The URL of the Ghost install",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl --fail http://localhost:2368/ghost/ || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://ghost.org/docs/",
+	tags: ["blog", "publishing", "writing", "cms", "content"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 512,
+	gpuRequired: false,
+};

package/src/services/definitions/homeassistant.ts

@@ -0,0 +1,65 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const homeassistantDefinition: ServiceDefinition = {
+	id: "homeassistant",
+	name: "Home Assistant",
+	description: "Open source home automation that puts local control and privacy first.",
+	category: "automation",
+	icon: "🏠",
+
+	image: "ghcr.io/home-assistant/home-assistant",
+	imageTag: "stable",
+	ports: [
+		{
+			host: 8123,
+			container: 8123,
+			description: "Home Assistant Web Interface",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "homeassistant_config",
+			containerPath: "/config",
+			description: "Home Assistant configuration directory",
+		},
+		{
+			name: "/etc/localtime",
+			containerPath: "/etc/localtime",
+			description: "Timezone sync",
+		},
+	],
+	environment: [
+		{
+			key: "TZ",
+			defaultValue: "UTC",
+			secret: false,
+			description: "Timezone mapping",
+			required: false,
+		},
+	],
+	healthcheck: {
+		test: "curl --fail http://localhost:8123/ || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://www.home-assistant.io/docs/",
+	tags: ["smarthome", "automation", "iot", "local-first"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 1024,
+	gpuRequired: false,
+};

package/src/services/definitions/immich.ts

@@ -0,0 +1,93 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const immichDefinition: ServiceDefinition = {
+	id: "immich",
+	name: "Immich",
+	description: "High performance self-hosted photo and video management solution.",
+	category: "media",
+	icon: "📸",
+
+	image: "ghcr.io/immich-app/immich-server",
+	imageTag: "release",
+	ports: [
+		{
+			host: 2283,
+			container: 2283,
+			description: "Immich Web Interface",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "immich_upload",
+			containerPath: "/usr/src/app/upload",
+			description: "Persistent Immich photos/videos storage",
+		},
+		{
+			name: "/etc/localtime",
+			containerPath: "/etc/localtime",
+			description: "Host timezone synchronization",
+		},
+	],
+	environment: [
+		{
+			key: "DB_HOSTNAME",
+			defaultValue: "postgres",
+			secret: false,
+			description: "Database hostname",
+			required: true,
+		},
+		{
+			key: "DB_USERNAME",
+			defaultValue: "postgres",
+			secret: false,
+			description: "Database user",
+			required: true,
+		},
+		{
+			key: "DB_PASSWORD",
+			defaultValue: "postgres",
+			secret: true,
+			description: "Database password",
+			required: true,
+		},
+		{
+			key: "DB_DATABASE_NAME",
+			defaultValue: "immich",
+			secret: false,
+			description: "Database name",
+			required: true,
+		},
+		{
+			key: "REDIS_HOSTNAME",
+			defaultValue: "redis",
+			secret: false,
+			description: "Redis hostname",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl --fail http://localhost:2283/api/server-info/ping || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: ["postgresql", "redis"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://immich.app/docs/overview/introduction",
+	tags: ["media", "photos", "videos", "gallery", "backup"],
+	maturity: "stable",
+
+	requires: ["postgresql", "redis"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 1024,
+	gpuRequired: false,
+};